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What is claimed is: 

1 .A service provision system comprising a common 
platform as an interface function with a client and an 
5 object network for communicating through the platform 

and providing a service intentionally requested by the 
client, said object network further comprising: 
a hierarchical structure, comprising: 

a data model in which an attribute structure 
10 of the object network is determined as a template; 

an object model that is positioned higher 
in rank than the data model and has a matching 
constraint on security; 

a role model that is positioned higher in 
15 rank than the object model and expresses a content 

of a process to be performed in an environment as 
an aggregate of a plurality of object models; and 
a process model that is positioned highest 
in rank and defines a dynamic process to be 
20 cooperatively performed by a plurality of role 

models as one process, and 

a security matching constraint check unit 
ensuring security of a system by checking a security 
constraint attached to the template. 

25 
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2. The service provision system according to claim 1, 
wherein 

the security matching constraint check unit 
checks access to a system that does not provide 
5 sufficient data to authenticate intension of an 

appropriate execution process. 

3. The service provision system according to claim 1, 
wherein 

10 the communications of a system is implemented by 

a communications role function corresponding to the role 
model, and 

said security matching constraint check unit 
further comprises gate means for checking attribute 
15 structure data of the communications medium with a 

security constraint in a role model corresponding to 
the communications role function. 

4. The service provision system according to claim 1, 
20 wherein 

when a service intentionally requested by the 
client is provided, said security matching constraint 
check unit checks an access right to a system of a person 
concerned related to the intention. 



25 
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5. The service provision system according to claim 1, 
wherein said object model further comprising: 

a format model which expresses patterns of both 
a noun object and a verb object as objects in formats; 
5 a feature model, which expresses a feature of an 

object, based on an attribute value of the object and 
to which a constraint is attached based on an 
environment ; 

an object network model with a graphic structure 
10 having a name of the noun object and a name of the verb 

object as a node and a branch, respectively; and 

a cell in which a security matching constraint for 
indicating a relationship in a system between the format 
model and feature model in a template corresponding to 
15 the format and feature models is described, 

wherein 

said security matching constraint check unit 
ensures a security of a system by checking the matching 
constraint described in the cell. 

20 

6. The service provision system according to claim 1, 
further comprising 

sentence structure analyzing means for improving 
visibility for a client by analyzing a sentence 
25 structure of the object and displaying a sentence 
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structure obtained by the analysis on said common 
platform in order to sustain a security of a system. 

7. The service provision system according to claim 1, 
5 further comprising 

integration processing means for improving 
efficiency of an entire process of a system using a 
security matching constraint attached to the template 
when a process to be cooperatively performed by the 
10 plurality of role models. 

8. The service provision system according to claim 1, 
further comprising 

conflicting operation modeling means for 
15 generating based on the security matching constraint 

a model against a conflicting operation that has the 
possibility of executing a malicious service against 
a person concerned receiving a service from the service 
provision system as a result, 
20 wherein 

said security matching constraint check unit 
checks the conflicting operation using the model. 

9. The service provision system according to claim 8, 
25 wherein 
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said conflicting operation-modeling means 
describes the matching constraint based on a 
relationship between a specific word and a specific 
operation. 

5 

10. The service provision system for executing a service 
using a waterwork pattern according to claim 1, wherein 

said matching constraint check unit judges a 
target pattern using a matching constraint, including 
10 location information between an original pattern in 

which a waterwork pattern is embedded and the waterwork 
pattern. 

11. The service provision system according to claim 1, 
15 which 

restricts communications services, 
conducts event drive as communications intention 
of an operating person concerned, 

authenticates a communications system, 
20 confirms occurrence of a communication event 

based on a security matching constraint, 
requests a service as communications business, if 
data are matched, 

authenticates a communications attribute 
25 structure and confirms the service request based on a 
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security matching constraint of a communications 
content structure, and 

requests the communications service when data of 
a communications operation are matched. 

5 

12. The service provision system according to claim 11, 
which 

issues a data non-matching message if data are not 
matched when the data are checked based on both the 
10 occurrence of a communications event and the security 

constraint, and 

issues a data non-matching message if data are not 
matched when the data are checked based on the security 
matching constraint of a communications content 
15 structure. 

13. An object network system, comprising: 

a unit setting a security matching constraint in 
each object; and 
20 a unit checking the security matching constraint. 

14. A service provision system comprising a common 
platform as an interface function with a client and an 
object network for communicating through the platform 

25 and providing a service intentionally requested by the 
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client, said object network further comprising: 
a hierarchical structure, comprising: 

a data model in which an attribute structure 
of the object network is determined as a template; 

an object model that is positioned higher 
in rank than the data model and has a matching 
constraint on security; 

a role model that is positioned higher in 
rank than the object model and expresses a content 
of a process to be performed in an environment as 
an aggregate of a plurality of object models; and 

a process model that is positioned highest 
in rank and defines a dynamic process to be 
cooperatively performed by a plurality of role 
models as one process, and 

a security matching constraint check means for 
ensuring security of a system by checking a security 
constraint attached to the template. 

15. An object network system, comprising: 

means for setting a security matching constraint 

in each object; and 

means for checking the security matching 

constraint . 



